CVE-2024-9844

Description

Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions.

Affected Platforms

Weakness Type

CWE-602, NVD-CWE-Other

References

• https://forums.ivanti.com/s/article/December-2024-Security-Advisory-Ivanti-Conne…